Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
File: kkGtDn_CK_urVnvon2PZgF5euao.mft (raw, json)
Hash identifier: U93kZcdini27UBBm+5T1bWqO50LUO2lCYpz4WH7eMwQ=
Subject key identifier: AE:EF:B2:F3:6E:AE:45:DD:50:62:A6:39:76:C5:FD:AE:34:39:94:34
Authority key identifier: 92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
Certificate issuer: /CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Certificate serial: 0193572DE12AE583935458E1E255BB4D1B9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
Manifest number: 1374
Signing time: Sat 23 Nov 2024 04:00:44 +0000
Manifest this update: Sat 23 Nov 2024 04:00:44 +0000
Manifest next update: Sun 24 Nov 2024 04:00:44 +0000
Files and hashes: 1: kkGtDn_CK_urVnvon2PZgF5euao.crl (hash: znIElN2p+PspPaptTsiLH65Tpsgx6sAtQhl90/MM0CU=)
2: mxB7fPbPYlglxu9Hqzdn1wHxfjg.roa (hash: bntfFA4MKp2qirSlJ6+S7r3t8xM2lzrUDvsVAjXIFbI=)
3: o6U8cf4IAHUhzjukkymhlYh-D1g.roa (hash: F+55N/KHjLo7Y2Wx3UEkCLzuj6kDUK5mbDOtCsMWrms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:e1:2a:e5:83:93:54:58:e1:e2:55:bb:4d:1b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Validity
Not Before: Nov 23 04:00:44 2024 GMT
Not After : Nov 24 04:00:44 2024 GMT
Subject: CN=aeefb2f36eae45dd5062a63976c5fdae34399434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a1:ce:25:28:cf:b6:61:44:9b:03:46:d9:02:
ed:23:26:30:9c:ed:50:c9:6c:24:70:b4:00:6d:1f:
4d:2e:c7:0a:2d:61:14:60:d3:68:53:09:96:63:00:
95:3f:3e:de:c9:57:5e:82:9f:9a:82:ef:3e:18:b5:
09:a8:89:c2:92:0c:75:a8:8a:fc:da:31:23:dd:50:
90:82:db:8d:a4:f3:a1:08:02:ff:3a:7b:06:85:6b:
cb:9c:d9:d2:08:07:e5:2e:61:a5:ff:b6:1a:1d:07:
b9:0a:6f:e2:b9:da:cd:67:ac:c4:46:83:3f:cd:4a:
2b:11:44:8b:93:b3:cb:3c:f5:90:65:64:ee:19:a4:
9a:52:e2:5a:a3:9d:c0:70:91:9b:e9:40:64:48:c7:
60:6f:2b:8c:1e:3e:58:e7:a8:10:f4:f8:3d:6c:93:
8e:2a:de:4f:71:f9:66:97:47:65:87:17:90:4f:56:
4f:82:8d:59:00:28:49:55:df:27:02:88:e1:5e:92:
9a:aa:9b:da:e3:03:21:5d:2e:47:5e:87:7e:97:16:
cd:bc:20:8f:ba:6d:00:e2:07:85:d6:f0:56:c0:0e:
40:a8:30:c8:32:01:ed:c6:d7:32:fc:69:13:6b:77:
e6:d0:b3:d1:67:1e:65:52:23:2b:03:48:56:66:e3:
63:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:EF:B2:F3:6E:AE:45:DD:50:62:A6:39:76:C5:FD:AE:34:39:94:34
X509v3 Authority Key Identifier:
keyid:92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a6:03:89:93:98:f9:17:f3:96:1d:dd:21:c8:40:2f:49:1e:
ec:1d:08:4f:32:4c:6c:43:c9:e5:76:96:3a:a8:af:bd:e1:96:
24:cc:b4:82:fa:a1:80:cd:b2:45:9c:1d:47:82:6c:0a:15:38:
e4:1f:06:fa:d7:ce:b5:6f:59:42:4b:76:4b:ea:b8:d8:b2:e6:
0d:95:7d:56:99:f7:09:5b:d0:35:d7:07:15:58:9f:9c:e9:e0:
77:86:7d:86:b6:4b:a5:d6:60:5f:52:1b:78:3a:11:ca:c8:22:
36:19:b4:16:e5:a3:b2:64:b5:d1:73:21:d4:1f:3c:42:69:46:
34:4f:d6:07:40:ca:49:d1:32:f7:f4:5c:b4:59:9b:ac:36:84:
8c:8c:a4:14:78:27:ab:86:a6:c3:fc:6e:b7:77:09:85:f9:aa:
9c:7f:08:eb:bd:11:e2:bc:8a:3e:26:99:bf:e9:ca:b4:a2:d3:
5e:7b:ae:56:2e:a9:45:8a:ed:1d:e1:34:f4:8c:de:a8:cb:80:
4d:97:c2:de:63:82:cc:93:5c:4f:f1:84:66:2c:e2:40:af:5e:
26:af:50:50:e5:85:c4:ec:19:69:cb:6b:b3:4b:8d:a8:f0:60:
92:38:2b:ad:63:46:91:a1:67:f9:b1:bc:fe:2c:e5:02:fc:4f:
0f:da:09:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:10:57 2024 by rpki-client on console-fra.rpki-client.org